CWE-377Insecure Temporary File

Abstraction: Class · CVEs in our corpus: 104

Creating and using insecure temporary files can leave application and system data vulnerable to attack.

Last updated: 20 August 2026 14:15 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 2 mapping(s) from 1 framework(s): CAPEC 2 (partial)

See the full cumulative-coverage rollup →

OWASP Top 10 for Web (2025)

This weakness contributes to A01:2025 Broken Access Control.

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SC-4 Information in Shared System Resources
AC-3 Access Enforcement
AC-6 Least Privilege

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2015-5224`	7.9	9.8	0.0453	2017-08-23
`CVE-2012-2666`	7.7	9.8	0.0193	2021-07-09
`CVE-2011-4119`	7.7	9.8	0.0189	2021-10-26
`CVE-2013-4561`	7.1	9.1	0.0130	2022-06-30
`CVE-2018-16494`	6.9	8.8	0.0192	2021-05-26
`CVE-2022-21809`	6.5	8.1	0.0179	2022-05-12
`CVE-2018-3710`	6.3	7.8	0.0286	2018-03-21
`CVE-2022-0736`	6.2	7.5	0.0158	2022-02-23
`CVE-2023-43498`	6.2	8.1	0.0080	2023-09-20
`CVE-2022-0315`	6.0	7.5	0.0096	2022-03-24
`CVE-2025-14307`	6.0	8.1	0.0032	2025-12-09
`CVE-2018-6706`	5.9	7.5	0.0062	2018-12-12
`CVE-2013-4253`	5.9	7.5	0.0063	2022-10-19
`CVE-2026-20204`	5.9	7.1	0.0328	2026-04-15
`CVE-2025-67223`	5.9	7.5	0.0063	2026-04-28
`CVE-2018-6704`	5.8	7.8	0.0037	2018-12-12
`CVE-2018-6705`	5.8	7.8	0.0038	2018-12-12
`CVE-2025-34194`	5.8	7.8	0.0031	2025-09-19
`CVE-2020-1991`	5.7	7.8	0.0028	2020-04-08
`CVE-2026-20649`	5.7	7.5	0.0023	2026-02-11
`CVE-2025-7707`	5.6	7.8	0.0017	2025-10-13
`CVE-2025-46369`	5.6	7.8	0.0012	2025-11-13
`CVE-2017-16024`	5.5	6.5	0.0256	2018-06-04
`CVE-2016-9595`	5.5	7.3	0.0040	2018-07-27
`CVE-2020-8027`	5.5	7.3	0.0030	2021-02-11